chore(deps): land pending dependency upgrades

.github/actions/setup-bun/action.yml

@@ -7,9 +7,9 @@ inputs:
     required: false
     default: 'latest'
   node-version:
-    description: 'Node.js version (only needed for npm publish)'
+    description: 'Node.js version for build, test, and publish tooling'
     required: false
-    default: ''
+    default: '24'
 
 runs:
   using: composite
@@ -27,7 +27,7 @@ runs:
         registry-url: 'https://registry.npmjs.org'
 
     - name: Cache Bun dependencies
-      uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+      uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
       with:
         path: |
           ~/.bun/install/cache

.github/dependabot.yml

@@ -23,6 +23,7 @@ updates:
       typescript:
         patterns:
           - 'typescript'
+          - '@typescript/*'
           - 'tsup'
           - '@types/*'
     ignore:

.github/workflows/ci.yml

@@ -25,7 +25,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
@@ -57,15 +57,15 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
       - name: Setup
         uses: ./.github/actions/setup-bun
 
       - name: Cache Playwright browsers
-        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: ~/.cache/ms-playwright
           key: playwright-${{ runner.os }}-${{ hashFiles('bun.lock') }}
@@ -80,7 +80,7 @@ jobs:
 
       - name: Upload report on failure
         if: failure()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: playwright-report
           path: playwright-report/
@@ -94,7 +94,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
       - name: Setup
@@ -117,7 +117,7 @@ jobs:
           STUDIO_TEST_BASE_PATH=/tools/studio/ bun run test:e2e
       - name: Upload browser evidence
         if: failure()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: workbench-browser-evidence
           path: |

.github/workflows/deploy-examples.yml

@@ -28,7 +28,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
@@ -64,4 +64,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0
+        uses: actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346 # v5.0.1

.github/workflows/release.yml

@@ -20,14 +20,14 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
       - name: Setup
         uses: ./.github/actions/setup-bun
         with:
-          node-version: '20'
+          node-version: '24'
 
       - name: Build
         run: bun run build

.nvmrc

@@ -1 +1 @@
-18
+24.21.0

CONTRIBUTING.md

@@ -5,7 +5,7 @@ How to set up the project, run tests, add chart types, add table cell types, and
 ## Prerequisites
 
 - **Bun** (package manager and script runner)
-- **Node.js 18+** (runtime for TypeScript tooling)
+- **Node.js 24** (development runtime; use the version in `.nvmrc`)
 
 ## Setup
 
@@ -14,7 +14,14 @@ cd openchart
 bun install
 ```
 
-That's it. Bun installs all workspace packages and links the internal dependencies.
+Bun installs all workspace packages and links the internal dependencies.
+
+Type-checking uses TypeScript 7 through the `@typescript/native` alias. The
+`typescript` dependency aliases Microsoft's `@typescript/typescript6` compatibility
+package because tsup and Svelte tooling still use the JavaScript compiler API.
+Keep both aliases when updating dependencies. The Bun patch for Ladle 5.1.1 moves
+its existing dialog-prop error suppressions to the locations reported by TypeScript 7;
+it only changes bundled type-checking sources, not Ladle's runtime.
 
 ## Development
 

apps/studio/package.json

@@ -18,8 +18,8 @@
     "@opendata-ai/openchart-vanilla": "workspace:*",
     "d3-dsv": "3.0.1",
     "motion": "14.1.0",
-    "react": "19.2.8",
-    "react-dom": "19.2.8",
+    "react": "19.3.0",
+    "react-dom": "19.3.0",
     "world-atlas": "2.0.2",
     "gifenc": "1.0.3"
   },
@@ -30,8 +30,8 @@
     "@types/node": "24.19.2",
     "@types/react": "19.2.14",
     "@types/react-dom": "19.2.3",
-    "typescript": "6.0.2",
+    "typescript": "7.0.2",
     "vite": "7.3.1",
-    "vitest": "4.0.18"
+    "vitest": "5.0.4"
   }
 }